Allow security_level to mestastasize into the verifier
authortb <tb@openbsd.org>
Mon, 27 Jun 2022 14:10:22 +0000 (14:10 +0000)
committertb <tb@openbsd.org>
Mon, 27 Jun 2022 14:10:22 +0000 (14:10 +0000)
commit284c6bbf718f984cb47bdcae8e03cbb111558302
treeb25df297784c8659d0815e88e675f8411c70215e
parente84fde04e5406f820226dabe5aa4b86e22a1d380
Allow security_level to mestastasize into the verifier

The tentacles are everywhere.  This checks that all certs in a chain
have keys and signature algorithms matching the requirements of the
security_level configured in the verify parameters.

ok beck jsing
lib/libcrypto/x509/x509_internal.h
lib/libcrypto/x509/x509_verify.c
lib/libcrypto/x509/x509_vfy.c
lib/libcrypto/x509/x509_vfy.h